{"metadata": {"vulnerability": "CVE-2022-29167", "count": 35, "kinds": {"milestone": 10, "sighting": 1, "kev": 0, "other": 24}}, "data": [{"timestamp": "2022-04-13T00:00:00Z", "date_only": false, "value": "2022-04-13T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2022-29167", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-05-05T00:00:00Z", "date_only": true, "value": "2022-05-05", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2022-29167", "record": "GSD-2022-29167", "field": "namespaces.gitlab.com.advisories.0.pubdate"}, {"timestamp": "2022-05-05T22:55:10Z", "date_only": false, "value": "2022-05-05T22:55:10.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-29167", "field": "cveMetadata.datePublished"}, {"timestamp": "2022-05-05T22:55:10Z", "date_only": false, "value": "2022-05-05T22:55:10.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2022-29167", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-05-05T23:15:00Z", "date_only": false, "value": "2022-05-05T23:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-44PW-H2CW-W3VQ", "record": "GHSA-44PW-H2CW-W3VQ", "field": "database_specific.nvd_published_at"}, {"timestamp": "2022-05-05T23:15:00Z", "date_only": false, "value": "2022-05-05T23:15:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2022-29167", "record": "UBUNTU-CVE-2022-29167", "field": "published"}, {"timestamp": "2022-05-05T23:15:00Z", "date_only": false, "value": "2022-05-05T23:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-29167", "record": "GSD-2022-29167", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2022-05-05T23:15:09.083Z", "date_only": false, "value": "2022-05-05T23:15:09.083", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-29167", "record": "FKIE_CVE-2022-29167", "field": "published"}, {"timestamp": "2022-05-06T02:11:57Z", "date_only": false, "value": "2022-05-06T02:11:57.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/42069", "record": "CVE-2022-29167", "field": "creation_timestamp", "uuid": "601a539c-ee71-445a-9c2d-ff3ebbab3bcd", "content": "\u203c CVE-2022-29167 \u203c\n\nHawk is an HTTP authentication scheme providing mechanisms for making authenticated HTTP requests with partial cryptographic verification of the request and response, covering the HTTP method, request URI, host, and optionally the request payload. Hawk used a regular expression to parse `Host` HTTP header (`Hawk.utils.parseHost()`), which was subject to regular expression DoS attack - meaning each added character in the attacker's input increases the computation time exponentially. `parseHost()` was patched in `9.0.1` to use built-in `URL` class to parse hostname instead. `Hawk.authenticate()` accepts `options` argument. If that contains `host` and `port`, those would be used instead of a call to `utils.parseHost()`.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/42069"}, {"timestamp": "2022-05-20T11:04:56Z", "date_only": false, "value": "2022-05-20T11:04:56Z", "kind": "milestone", "label": "Published", "source": "osv_openeuler \u00b7 OESA-2022-1667", "record": "OESA-2022-1667", "field": "published"}, {"timestamp": "2022-05-23T20:18:14Z", "date_only": false, "value": "2022-05-23T20:18:14Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-44PW-H2CW-W3VQ", "record": "GHSA-44PW-H2CW-W3VQ", "field": "published"}, {"timestamp": "2022-05-23T20:18:14Z", "date_only": false, "value": "2022-05-23T20:18:14Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-44PW-H2CW-W3VQ", "record": "GHSA-44PW-H2CW-W3VQ", "field": "modified"}, {"timestamp": "2023-07-21T00:00:00Z", "date_only": true, "value": "2023-07-21", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2022-29167", "record": "GSD-2022-29167", "field": "namespaces.gitlab.com.advisories.0.date"}, {"timestamp": "2023-07-21T16:42:00Z", "date_only": false, "value": "2023-07-21T16:42Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-29167", "record": "GSD-2022-29167", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-12-13T01:19:42.408Z", "date_only": false, "value": "2023-12-13T01:19:42.408738Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-29167", "record": "GSD-2022-29167", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-07-10T00:00:00Z", "date_only": true, "value": "2024-07-10", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0575", "record": "CERTFR-2024-AVI-0575", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2024-07-10T22:00:00Z", "date_only": false, "value": "2024-07-10T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1591", "record": "WID-SEC-W-2024-1591", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-07-10T22:00:00Z", "date_only": false, "value": "2024-07-10T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1591", "record": "WID-SEC-W-2024-1591", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-07-10T22:00:00Z", "date_only": false, "value": "2024-07-10T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1591", "record": "WID-SEC-W-2024-1591", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2024-07-11T00:00:00Z", "date_only": true, "value": "2024-07-11", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0575", "record": "CERTFR-2024-AVI-0575", "field": "vendor_advisories.28.published_at"}, {"timestamp": "2024-07-12T00:00:00Z", "date_only": false, "value": "2024-07-12T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0575", "record": "CERTFR-2024-AVI-0575", "field": "initial_release_date"}, {"timestamp": "2024-07-12T00:00:00Z", "date_only": false, "value": "2024-07-12T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0575", "record": "CERTFR-2024-AVI-0575", "field": "revisions.0.revision_date"}, {"timestamp": "2024-08-03T06:17:54.086Z", "date_only": false, "value": "2024-08-03T06:17:54.086Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2022-29167", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-15T00:00:00Z", "date_only": false, "value": "2024-10-15T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0575", "record": "CERTFR-2024-AVI-0575", "field": "last_revision_date"}, {"timestamp": "2024-10-15T00:00:00Z", "date_only": false, "value": "2024-10-15T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0575", "record": "CERTFR-2024-AVI-0575", "field": "revisions.1.revision_date"}, {"timestamp": "2024-11-11T23:00:00Z", "date_only": false, "value": "2024-11-11T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1591", "record": "WID-SEC-W-2024-1591", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2024-11-11T23:00:00Z", "date_only": false, "value": "2024-11-11T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1591", "record": "WID-SEC-W-2024-1591", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-11-12T09:31:28.569Z", "date_only": false, "value": "2024-11-12T09:31:28.569+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1591", "record": "WID-SEC-W-2024-1591", "field": "document.tracking.generator.date"}, {"timestamp": "2025-04-23T14:07:46.041Z", "date_only": false, "value": "2025-04-23T14:07:46.041057Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-29167", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2025-04-23T14:07:46.041Z", "date_only": false, "value": "2025-04-23T14:07:46.041057Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-29167", "record": "FKIE_CVE-2022-29167", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-04-23T18:30:44.456Z", "date_only": false, "value": "2025-04-23T18:30:44.456Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2022-29167", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-04-23T18:30:44.456Z", "date_only": false, "value": "2025-04-23T18:30:44.456Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-29167", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-07-16T05:01:23Z", "date_only": false, "value": "2025-07-16T05:01:23Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2022-29167", "record": "UBUNTU-CVE-2022-29167", "field": "modified"}, {"timestamp": "2026-06-17T04:39:43.723Z", "date_only": false, "value": "2026-06-17T04:39:43.723", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-29167", "record": "FKIE_CVE-2022-29167", "field": "lastModified"}, {"timestamp": "2026-08-06T11:04:56Z", "date_only": false, "value": "2026-08-06T11:04:56Z", "kind": "other", "label": "Updated", "source": "osv_openeuler \u00b7 OESA-2022-1667", "record": "OESA-2022-1667", "field": "modified"}]}